summaryrefslogtreecommitdiff
path: root/0x0-prune.service
diff options
context:
space:
mode:
authorMia Herkt <mia@0x0.st>2022-11-29 17:23:30 +0100
committerMia Herkt <mia@0x0.st>2022-11-29 17:23:30 +0100
commitdb9a20c94d395b273caf24dfcc6a48ab3d020768 (patch)
treebd1685007d580e2d0f8f0e3feb879f082d491a7c /0x0-prune.service
parentf25619b7e3f7f6618b5e3fecc57cb08fdb67c2a9 (diff)
Add example systemd unit files for prune job
Diffstat (limited to '0x0-prune.service')
-rw-r--r--0x0-prune.service22
1 files changed, 22 insertions, 0 deletions
diff --git a/0x0-prune.service b/0x0-prune.service
new file mode 100644
index 0000000..b28fb2d
--- /dev/null
+++ b/0x0-prune.service
@@ -0,0 +1,22 @@
+[Unit]
+Description=Prune 0x0 files
+After=remote-fs.target
+
+[Service]
+Type=oneshot
+User=nullptr
+WorkingDirectory=/path/to/0x0
+BindPaths=/path/to/0x0
+
+Environment=FLASK_APP=fhost
+ExecStart=/usr/bin/flask prune
+ProtectProc=noaccess
+ProtectSystem=strict
+ProtectHome=tmpfs
+PrivateTmp=true
+PrivateUsers=true
+ProtectKernelLogs=true
+LockPersonality=true
+
+[Install]
+WantedBy=multi-user.target